ipsec whack --trafficstatus
ipsec status | grep "STATE_"
